Single Sign-On Azure AD in Orchestration, Data Quality and Data Enrichment¶

This article will walk through how to set up single sign-on using Azure AD and how the authentication flow changes along with that setup.

Setup an application in Azure AD¶

The first step in order to enable single sign-on using Azure AD is to set up an application in your company Azure AD. These are the steps that are required to set up an application:

1. Navigate to https://portal.azure.com and sign in with your credentials
2. Press the View button to manage your Azure Active Directory

3. In the left navigation pane press App registrations

4. Next in the top navigation pane click New registration

5. Fill in the new application information as seen below and press the Register button, ensure to add login.timextender.com as the Redirect URI

6. Next click Add an Application ID URI

7. Click the Overview button in the left navigation pane and then click the Redirect URIs link to register configurations for the desktop application

8. Add the TDP URL as an SPA redirect URI. In the App Registration, go to Authentication → Add a platform → Single-page application, then add https://{customerkey}.odq.timextender.com (replace {customerkey} with your tenant key).

9. Click the API Permission tab on the left navigation pane
10. Select the User
11. Read line and click Grant admin consent for X

12. If you plan to use Azure Active Directory Groups you need to add Group.Read.All Delegated permission as well. Note that this is required for Entra Groups in TDP

    

Setup in Timextender¶

Start by navigating to the overview for the application just created in Azure AD.

Send an email to support (support@timextender.com) listing the following configuration information:

Azure Active Directory configuration

• Application ID: {your-application-id-uri}
• Tenant ID: {your-tenant-id}
• Your domain: {mydomain.com}

Authentication flow¶

After the configuration has been set up and the application registered the flow in both the desktop application and web client will be slightly different.

Web client¶

Navigate to https://login.timextender.com and enter your email

If you have set up single sign-on using Azure AD, you will be redirected to your companies login site and it will probably look something like this:

Desktop application¶

Open up the desktop application. We are using Data Enrichment as a demonstration in this example, but the same principle applies to Timextender Orchestration & Data Quality as well.